changed sendRedirect to forward to preserve http method that was used with original request